On Universal and Fault- Tolerant Quantum Computing 
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Abstract 

A novel universal and fault-tolerant basis (set 
of gates) for quantum computation is described. 
Such a set is necessary to perform quantum 
computation in a realistic noisy environment. 
The new basis consists of two single-qubit gates 
{Hadamard and a^*), and one double-qubit gate 
(Controlled-NOT). Since the set consisting of 
Controlled-NOT and Hadamard gates is not uni- 
versal, the new basis achieves universality by in- 
cluding only one additional elementary (in the 
sense that it does not include angles that are 
irrational multiples of vr) single-qubit gate, and 
hence, is potentially the simplest universal basis 
that one can construct. We also provide an al- 
ternative proof of universality for the only other 
known class of universal and fault-tolerant basis 
proposed in ||2^, p!7| . 

1 Introduction 

A new model of computation based on the laws 
of quantum mechanics has been shown to be su- 
perior to standard (classical) computation mod- 
els [^, 15 1 . Potential realizations of such com- 



puting devices are currently under extensive re- 
search 0, 11, m, 1^, m, H, H, H, and the 
theory of using them in a realistic noisy envi- 
ronment is still developing. Two of the main re- 
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quirements for error-free operations are to have 
a set of gates that is both universal for quantum 
computing (see Q and references therein), and 
that can operate in a noisy environment (i.e., 
fault-tolerant) |3|, |2|, g |l|, |17|. 



A scheme to correct errors in quantum bits 
(qubits) was proposed by Shor [^] by adopt- 
ing standard coding techniques and modifying 
them to correct quantum mechanical errors in- 
duced by the environment. In such quantum 
error-correction techniques, the two states of 
each qubit are encoded using a string of qubits, 
so that the state of the qubit is kept in a pre- 
specified two-dimensional subspace of the space 
spanned by the string of qubits. We refer to 
this as the logical qubit. This is done in a way 
that error in one or more (as permitted by the 
code) physical qubits will not destroy the logi- 
cal qubit. To avoid errors in the computation 
itself, Shor |25] suggested performing the com- 
putations on the logical qubits (without first de- 
coding them), and this type of computation is 
known as fault-tolerant computation. 

There are a number of requirements that a 
fault-tolerant quantum circuit must satisfy. To 
prevent propagation of single-qubit errors to 
other qubits in the same code word, one require- 
ment of fault-tolerant computation is to disal- 
low operations between any two qubits from the 
same codeword. This constraint imposes sig- 
nificant restrictions on both the types of uni- 
tary operations that can be performed on the 
encoded logical qubits, and the quantum error- 
correcting codes that can be used to encode the 
logical qubits. For example, if a "double-even" 
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CSS codefl (e.g., the ((7, 1, 3)) quantum code de- 
scribed in [y, |2^]) is used then one can show that 
the following unitary operations can be fault- 
tolerantly implemented: 



(1) 



where H and a] are defined in the next section, 
and /\k{U) denotes the controlled-C/ operation 
with k control bits (see |Q). So far, these oper- 
ations are the only ones that have been shown 
to be "directly" fault-tolerant (in the sense that 
no measurements and/or preparations of special 
states are required) operations. It is well known, 
however, that the group generated by the above 
operations (also referred to as the normalizer 
group) is not universal for quantum computa- 
tion. This leads to the interesting problem of 
determining a basis that is both universal and 
can be implemented fault-tolerantly. 

There are several well-established results on 
the universality of quantum bases [l|, ^, ^, |5|, ^ . 
Proofs of universality of these bases rest primar- 
ily on the fact that they include at least one 
"non-elementary" gate, i.e., a gate that performs 
a rotation on single qubits by an irrational mul- 
tiple of vr. A direct fault-tolerant realization of 
such a gate, however, is not possible; this prop- 
erty makes all the well-known universal bases 
inappropriate for practical and noisy quantum 
computation. 

The search for universal and fault-tolerant 
bases has led to a novel basis as proposed in 



the seminal work of Shor |25|. It includes the 
Toffoli gate in addition to the above-mentioned 
generators of the normalizer group; hence, the 
basis can be represented by the following set 
{H, (Jz^, A2(cr^) }. A fault-tolerant realization 
of the Toffoli gate (involving only the generators 
of the normalizer group, preparation of a spe- 
cial state, and appropriate measurements) has 
been shown in [ 25 1 ; a proof of universality of this 



basis, however, was not included. Later Kitaev 
1 17 1 proved the universality of a basis, compris- 
ing the set {/\i{a z"^) ■, H} (see Section 5.1), that 
is "equivalent" to Shor's basis, i.e., the gates in 
the new basis can be exactly realized using gates 
in Shor's basis and vice-versa. This result pro- 
vides the first published proof of the universality 
of a fault tolerant basis. 

A number of other researchers have proposed 

fault-tolerant bases that are equivalent to Shor's 

basis. Knill, Lafiamme, and Zurek ^M con- 

1 1 — 

sidered the bases {(T^a, Ai((T^2), hi{ax)} and 

{H, (T^2 , Ki{az^), h.i{ax) }• The universality of 
these bases follows from the fact that gates in 
Shor's basis can be simulated by small simple 
circuits over these new bases. Hence, while novel 
fault-tolerant realizations of the relevant gates in 
these bases were proposed, no new proofs of uni- 
versality was provided. The same authors later 
[18 1 studied a model in which the following set of 
gates {H, az^, Ai{ax) } and the prepared state 
cos(7r/8)|0)L-|-sin(7r/8)|l)L 0are made available. 
Again, the universality of this model follows from 
the fact that it can realize the gate Ai{H), and 
consequently the Toffoli gate. We also note that 
Aharonov and Ben-Or P] considered quantum 
systems with basic units that have p > 2 states 
(referred to as qupits). They proposed a class 
of quantum codes, called polynomial codes, for 
such systems consisting of qupits. They defined 
a basis for the polynomial codes and proved that 
it is universal. However their proof makes ex- 
plicit use of qupits with more than two states, 
and hence does not directly apply to the case 
studied in this paper, where all operations are 
done on qubits only. 

In this paper, we prove the existence of a novel 
basis for quantum computation that lends itself 
to an elegant proof (based solely on the geometry 
of real rotations in three dimensions) of univer- 
sality and in which all the gates can be easily 
realized in a fault-tolerant manner. In fact, we 
show that the inclusion of only one additional 



^Double even codes are punctured binary codes in 
which the number of ones in any codeword is a multiple 
of 4 0. 
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qubits. 



single-qubit operation in the set in (|l|), namely, 
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leads to a universal and fault-tolerant basis for 
quantum computation. Note that ai is not re- 
quired anymore. Thus, our basis consists of the 
following three gates 



H, 



ai, 



Ai(o-x) 



(2) 



Proving the universality of Shor's basis (see [|lj 
seems to be a more involved process than prov- 
ing the universality of the set of gates we suggest 
here. Moreover, we outline a general method 
for fault tolerant realizations of a certain class 
of unitary operations; the fault-tolerant realiza- 
tions of both the a^^ and the Toffoli gates are 
shown to be special cases of this general formu- 
lation. 

The first part of this paper is devoted to the 
proof of universality, followed by a discussion on 
the fault-tolerant realization of the cr^s gate, and 
finally an alternate proof for the universality of 
Shor's basis. We also show in Appendix ^ that 
the new basis proposed in this paper is not equiv- 
alent to Shor's basis. 

2 Definitions and Identities 

Define the usual Pauli matrices Uj, and 
Hadamard operator H. 



CFt. 



1 

1 



Oz = 



1 
-1 



-i 
i 



First, we review some properties of matrices 
in SU(2). Note that all traceless and Hermitian 
2x2 unitary matrices can be represented as fol- 
lows: 

h- a = UxCTx + UyUy + UzGz , 



where n is a normalized real three-dimensional 
vector. From commutation relations one can 
show that (n • (?) = /, and using this fact, expo- 
nentiation of these Pauli matrices can be easily 
expanded as follows: 

e*'^"-^ = cos(/>/ + isin</.(n-(T) 

where / is the 2x2 identity matrix. It should be 
noted that for every element, U in SU(2) there 
exist (/>[/ and hjj, such that |p6| 



U 



J,4)unu-a 



Next, to motivate our proof, we note the con- 
nection between real rotations in three dimen- 
sions (i.e., elements of SO(3)) and the group we 
are concerned with, SU(2). Note that Euler de- 
compositions provide a way to represent a gen- 
eral rotation by an angle 2(f) about an axis n, 
Rn{2(j)), by a product of rotations about two or- 
thogonal axes. That is, 

i?ft(20) = R,{2a)Ryi2f5)R,{2-f). (3) 

There is a local isomorphism between SO(3) and 
SU(2). For the same parameters in (^, the fol- 
lowing equation is also true: 



^i<j)h-a _ ^ia(7^ ^if3cTy ^iya^ 



(4) 



Thus, just as any rotation can be thought of as 
three rotations about two axes, any element of 
SU(2) can be thought of as a product of three 
matrices, specifically, powers of exponentials of 
Pauli matrices. In the following section we will 
show that using the operations in our basis (|2|), 
we can approximate any "rotation" about two 
specific orthogonal axes, and then by Euler de- 
composition, we will show how all elements of 
SU(2) can be approximated. 

Lastly, we introduce a set of notations involv- 
ing real powers of the Pauli matrices that prove 
to be very useful. For example, there is an obvi- 
ous way to raise az to a real power: 



cr. 



1 



These matrices form an interesting family for 
quantum computation, and are generally used 



to put a relative phase between |0) and |1). For 
1 

example, aT , for integer values of n, are used 
in Shor's Factorization algorithm p4|| . Based on 
the definition of a", we use similarity transfor- 
mation to make the following identities: 



a^ = Ha^H, ay = az cr^az , U = ay a^a-y . 
Note that we can also equivalently write a" = 

e 2 e * 2 '^J. 



3 A Proof of Universality 

The proof of universality of our basis will be bro- 
ken down into two steps. In the first step we 

1 

show that H and u* form a dense set in SU(2); 
i.e. for any element of SU(2) and desired degree 

of precision, there exists a finite product of H 

1 

and ai that approximates it to this desired de- 
gree of precision. Next we observe that for uni- 
versal quantum computation all that is needed 
is Ai(a^) and SU(2) |]. 

For proving density in SU(2) using our basis, 
we first show that we can construct elements in 
our basis which correspond to rotations by an- 
gles that are irrational multiples of vr in SO(3) 
about two orthogonal axes. Once we have these 
irrational rotations about two orthogonal axes, 
then the density in SU(2) follows simply from 
the local isomorphism between SU(2) and SO(3) 
discussed in the previous section. Let 

giATrni-a^^ji^l and (5) 

gJATrna-a^^-i^-i^l^l^ (6) 

Given (yj6|) one can calculate Hi, n2, and A: 

cosA7r = cos2^ = -(! + -=) (7) 

ni = (V2cot-)— =-+y (8), 

n2 = {V2cot-)y--j=- (9) 

where x, y, and z are the unit vectors along the 
respective axes. One can easily verify that ni. 



n2 are orthogonal. (These would need to be nor- 
malized when used in exponentiation.) 

The number e*^'^ is a root of the irreducible 
monic polynomial 

x'^ + x^ + -x^ + X + 1 
4 

which is not cyclotomic (since not all coefficients 
are integers), and thus A is an irrational number 
(see Appendix^ Theorem B.l). Since A is irra- 
tional, it can be used to approximate any phase 
factor e**^: 



ginATT j^ gi</i 



for some n G N. 

Now we at least have two dense subsets of 
SU(2). Namely, e*""!"^ and e*^"2-<?. 



3j G N such that Avrj ~ a (mod 27r) 
hence, (e^-^^^^-^y ~ ^^^^'^ . 



3j G N such that AvrA; « /? (mod 27r) 
hence, (e^^^^-a^fc ^ ^i/Jna-a ^ 



(10) 



(11) 



Fortunately, this is all that is needed. Since, n\ 
and n2 are orthogonal, we can write any element 
of SU(2) in the following form p6|: 



Clearly, the representation in (^) is analogous to 
Euler rotations about three orthogonal vectors. 
Expansion of (12) gives: 



cos 4> = cos /? cos (7 -|- a) 
h sin (f) = hi cos (3 sin(7 + a) 
+ 112 sin j3 cos (7 — q) 
-|- ni X n2 sin (3 sin(7 — a) 



(13) 

(14) 



For any element of SU(2) equations (13,r4|) can 
be inverted to find a, P and 7. Since Ai{ax) 
and SU(2) form a universal basis for quantum 
computation [Q], it completes the proof of uni- 
versality of our basis. 

There is no guarantee that, in general, it is 
possible to efficiently approximate an arbitrary 
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Figure 1: Implementing ai fault-tolerantly. 



phase e^'^ by repeated applications of the avail- 
able phase e™'^. But using an argument similar 
to the one presented in |1|, we can show that 
for the given A (as defined in (|^), for any given 
e > 0, with only poly(-) iterations of e*'^^ we can 
get e*"^ within e. However, since our basis is al- 
ready proven to be universal, one can make use of 
an even better result. As it is shown by Kitaev 



1 17 1 and Solovay and Yao |27|, every universal 
quantum basis B is efficient, in the sense that 
any unitary operation in U(2"*), for constant m^ 
can be approximated within e by a circuit of size 
poly-log(^) over the basis B. 



A Fault-Tolerant Realization 

of Gz'^ 



We provide a simple scheme for the fault-tolerant 
realization of the (Jz'^ gate. The method de- 
scribes a general procedure that works for any 
quantum code for which the elements of the 
normalizer group can be implemented fault- 
tolerantly and involves the creation of special 
eigenstates of unitary transformations. 

To perform o"i fault-tolerantly we use the fol- 
lowing state: 



= (ylH\Q) 



|0) + e'4|l) 
V2 



(15) 



(for which we later present the preparation pro- 

1 

cess). To apply az to a general single qubit 
state IV') using this special state |(/>o), first ap- 
ply f\i{(Tx) from \tl)) to |0o). See Figure ||. Then 

measure the second qubit (|(/>o)) in the computa- 

1 

tion basis. If the result is |1), apply ai to the 
first qubit (|V'))- This leads to the desired oper- 



ation, as demonstrated in the following: 

|^)®|</>o) = (a|0)+/3|l))®M^^ 
"i^^^ (a|O) + e^f/3|l))0M 

+(a|0)+e-^f/3|l))®e^^ 



^f W 



V2 



a||V')®^ + a,^i 



(gie*4 



V2 



Clearly, the above analysis shows that all that 

is necessary to perform az fault tolerantly is the 

1 

state \4)q) and the ability to do Ai((TxO and o"! 

fault-tolerantly. For CSS codes, Ai(o-j,), H and 
1 

ai can be done fault-tolerantly |2^, |l4|. We 
next show how to generate the state \(f)Q) fault- 
tolerantly. 

Fault tolerant creation of certain particular en- 
coded eigenstates has been discussed [| 



18 . We 



present it in a more general way: suppose that 
the fault-tolerant operation [/^ operates as fol- 
lows: 

U^n\m) = {-mm) (16) 

on the states \rji). Thus, Un has the states |r/j) as 
eigenvectors with ±1 as the eigenvalues. Suppose 
we have access to a vector \tb) such that: 



a|%) +/?hi) 



(17) 



We show that using only bitwise operations, 
measurements, and this |'0), the eigenvectors \r]i) 
can be obtained. Now, to get the eigenvector of 
Uri we make use of a |cat) state. 

|cat) = ^(|00...0) + |ll...l)) = ^(|0) + |r)) 

(18) 

See Figure^. Applying Ai{Uri) bitwise, on |cat)(gi 
lib) we obtain: 



cat 



/\l{Ur,) 



«(^)l.o>+/3(M))| 



V2 



(19) 



|0> + |1> 



a|</'O>L+/3|0i>L 



a(|O> + |l»|0o>L+/3(|O>-|l»|<^i>i 



Figure 2: Creation of the |(/)o)eigenstate. 



A fault-tolerant ^measuremerit can be made to 
distinguish ' ' 1 ' from ' '~^ ' p5| . This mea- 
surement can be repeated to verify that you have 
it correct. 

The fault-tolerant version of ai needs the 
state \4>o), which can be generated using this 

formalism. In fact, {(po) is an eigenstate of 

1 _i 

U^ = cjz crj.(7z '^ ■ By commutation properties of 

_ 1 
the Gz ■* operator, it is shown that U^ can be 

realized with elements only from the normalizer 

Group. 



Shor's implementation of Toffoli |25| ] also uses a 
special case of this general procedure. For per- 
forming Toffoli one uses U = Ai(o"^) ® Oz to get 
the eigenstates: 



|AND) 
INAND) 



(|000) + |010) + |100) + |111)) 
(|001) + |011) + |101) + |110)) 



Shor uses the \ih) state of: 



Ua. 



1 _ 1 

4 4 

OzO^Gz 



e^ia'iar,;. 



(20) 



^(|AND) + INAND)) 
V2 

(F|O))0(/7|O))®(F|O)) 



Since erf and ax can be done fault-tolerantly, so 
can Ufj). We have claimed that |0o) ([l5|) is an 
eigenvector, and now we state the other eigen- 
vector. 

,ku, = M^iM (21) 



^- 



One can verify now that these 
tors: 



are eigenvec- 



Thus the special state in |]25[ can be obtained by 
the same general procedure. 

5 Universality of Shor's Basis 

5.1 Equivalence between {/\i{a z^) ■, H} 
and Shor's basis' 



Ua, 



1 _i 



= a}axa~z~'{a}H\i)) = aia^Hli) (22) 
= alHazli) = aiH{-iy\i) = {-!)%) 

Since the {(pi) vectors are orthogonal, any single 
qubit state |V') can be represented as a sum of 
the \(pi). 

|V)=a|0)+/3|l)=aVo)+/3Vi) (23) 

So, all the necessary ingredients are here: {ip), 
and an appropriate fault-tolerant operation, U^f,. 
If the outcome gives \(pi) rather than \(J)q) we can 
flip the state: 



Kitaev (|T^, Lemma 4.6) has provided a 
proof for the universality of the basis Qi = 
{Ai((T2 2), if}. This basis is equivalent to 
Shor's fault-tolerant basis {/\2{o'x),crz'2 ,H}, as 
observed in [|l^. We give one demonstration 
of this equivalence here for completeness. This 
equivalence was also showed independently by 
Aharonov and Ben-Or (in journal version of Q). 
To construct Qi from Shor's basis, it suffices 
to construct Ai{az^)- First we show that the op- 
erations A2{(Tz) and A2(o"y) can be implemented 
exactly using gates from Shor's basis {I2" is the 
identity operation on n qubits.): 



l0o) = a.|^i)=a.M^ 



V2 



V2 



(24) 



Hz -= 


E Haz'^Haz^H 


A2(a^) = 


= {h®H)A2{ax){h®H) 


A2{ay) = 


= {h®Hz)A2{(yx){h®H, 



Next, as shown in Figure y, f\i{(Tz'^) can be 
implemented using the identity: axOyfJz = i-^2- 
This reduction also shows that the universality 
of Qi implies the universality of Shor's basis. 



Figure 3: Constructing Qi from Shor's basis. 

Conversely, to construct Shor's basis from Qi, 
it suffices to construct the Toffoli gate A2 (cr^;). 
Note that Ai(cr^=^^) = {h ® H) Ai (cr^=^^)(/2 ® 
H). Figure H gives the circuit construction of 
Toffoli (see Lemma 6.1 of y] for a systematic 
construction of this circuit). 



^ 



T g> T '^ 



Figure 4: Constructing A2{(Tx) from Qi 



5.2 An Alternate Proof 

An alternative proof, which makes use of irra- 
tional "rotations" about orthogonal axes, is pre- 
sented in this section for the universality of each 
of the above two basis'. From either one of these 
sets, the following triplet of double-qubit gates 
is constructible: 

G = {Alia J), Alia J), S} 

where S is the swap gate: S\ab) = \ba) for any 
single-qubit states \a), \b), which can be con- 
structed as 

S = Aiiax)iH ® H) Ai iax)iH H) Ai (cj^). 

For future reference, note that each of the ma- 
trices in G are symmetric. Hence for any matrix 
M that is constructible from this set, so is its 
transpose M^ . 



It will be shown that any gate in the set 
/ 1 I \ 

^ ^ SU(3) 

V / 

can be approximated to arbitrary precision by 
a two-qubit circuit consisting only of gates from 
the set G. I.e. the set G under regular matrix 
multiplication generates a set dense in S. From 
this set all single-qubit unitary operations SU(2) 
can be approximated, which along with Ai(o"a;), 
has been shown [^ to be a universal set of gates. 
Though the correspondence is not a strict 
mathematical correspondence, it will be useful 
to make an analogy between real rotations in 3- 
dimensional space, and gates constructible from 
G. Define the following 6 elements of {G): 



Px 

Py 

Pz 



Ai(cr^2) Ai(ct^2) 



-1 



bpx J 



Aiiax)Py^ Aiiax) 



Pi = P'^^ Alia x) Alia z'^)pz 
P2 = PxPy 
P3 = PlP2Pi^ 

(Each inverse in the above definitions are obtain- 
able from G, since each element of G is of finite 
group order.) Since p2 and ps are unitary, they 
can be unitarily diagonalized: 



P2 
P3 



92Dil,l,e 
g3Dil,he 



-i2iTC i2-KC\ „—l 



-i2TTC i2nc 



)92 
)93' 



where 52) 93 are some unitary matrices (not nec- 
essarily in (G)), Z) is a diagonal matrix with the 
given ordered quadruplet as the entries along the 
diagonal, and e*^'"'^ = ^+^v^ for some c G M. 
The minimum monic polynomial for e*^'^'^ over 
the set of rational numbers is 



7ngi27rc(x) = X 



1 

2 ^ 



x\ 



and thus c Q (see Appendix y. Theorem B.l). 
It follows that successive powers of p2 and p^, can 
approximate matrices of the forms 



P2 


^ 52Z?(l,l,e-*^^e*^^)52~l 


(25) 


P3 


=. g^Di\Xe-''\e^'-^)g-^^ 


(26) 



for any 62,03 G K. The powers 712 and n^ are 
functions of 62 and 9^ , as well as the desired de- 
gree of accuracy. 

The operators pi, p2, and p^ fix the (unnor- 
malized) states |01)-|10), |01) + |10) + |11), and 
— |01) — |10) + 2|11), resp. which form an or- 
thogonal set of states. Motivated by considering 
these 3 operations to be rotations about 3 or- 
thogonal vectors, a change of basis is performed 
into this basis (while mapping the state |00) to it- 
self). Under this change of basis, equations ( p5| ) 
and (J2^) are expressed as: 



pT 



pT 



where a 

l+^v^ 



/I 




Vo 

/I 




Vo 

l+2i 





cos(6'2) 

—a* sin(0; 



cos(6'3) 

/3sin(03) 




) 



\ 

asin(6'2) 


C0S(^2) / 







-/3* sin(03) 

cos (6*3) 








1/ 



and 13 



-^ c..x^ M - ^, which hke e^'^'^" = 

^ above, are also seen to not be roots of 
unity. 

Given any 7 E C, I7I = 1, define the following 
single-parameter group of matrices: 



M^{e) = 



cos(e) 
7sin(0) 



-7* sin(6') 
cos(0) 



If 7 is not a root of unity, then it is straight- 
forward to show that the set of matrices 
{M^idY ,M^{d)\Q £ M} generates a dense sub- 
set of SU(2). Given this, and the fact that 
any element of SU(3) can be decomposed into 
a product of SU(2) operations acting on orthog- 
onal subspacespTI, it follows that the set 

{P2,P2,P3:P3} 

generates a dense subset of S. Since the previ- 
ous change of basis bijectively and continuously 
maps S onto itself, the operators G in the origi- 
nal basis generates a dense subset of S. D 
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A Shor's basis 

equivalent 



are 



and 
not 



In this appendix we show that Shor's basis and 
our basis { -ff , Oz"^, Ai((T^)} are not equivalent. 
In fact, every gate in Shor's basis can be exactly 
represented by a circuit over our basis. First, 
the following identity shows that our basis can 



exactly implement any gate from the Qi basis 
introduced in Section 5.1: 



Al(f7^2) 



/( 



0-2 



Tz 






1 

(7,4 



1 
(7,2 



Hence, as proved in the same section, it can ex- 
actly implement any gate from Shor's basis. We 
prove that the converse is not true. Toward this 
end, we show that the unitary operation az^, 
can be computed exactly by our basis but not 
by Shor's basis. First we prove a useful Lemma 
about unitary operations computable exactly by 
Shor's basis. Note that the set of integer com- 
plex numbers is the set Z + iZ of the complex 
numbers with integer real and imaginary parts. 

Lemma A.l Suppose that the unitary operation 
U £ U(2™') is the transformation performed by a 
circuit C defined over Shor's basis with m inputs. 
Then U is of the form — jM , where M is aT^ x 

2"^ matrix with only complex integer entries. 

Proof. Suppose that gi, . . . ,gt are the gates 
of C. Each gate gj can be considered as a uni- 
tary operation in U(2™) by acting as an identity 
operator on the qubits that are not inputs of gj. 
Let the matrix Mj £ U(2''") represent gj. Then 
U = Mt ■ ■ ■ Ml . If Qj is a (7^ 2 gate then Mj is 
a diagonal matrix with 1 or z on its diagonal. 
If gj is a Toffoli gate then Mj is a permutation 
matrix (which is a 0-1 matrix). Finally, if gj is 
a Hadamard gate, then Mj = -j=Mj' , where the 

entries of Mj' are integers. This completes the 
proof. D 

'\/2 
1 + i 



Now since o"^ * = -i= 



by Lemma 



A.l| it cannot be realized exactly by gates from 



• The minimum monic polynomial ma{x) S 
Q[x] for a = e*^'^'^ exists and is cyclotomic. 

• cgQ. 

Proof: 

A number of algebraic theorems will be taken for 
granted in this proof, in particular, properties of 
cyclotomic polynomials ^^(x). See, for instance, 
Dummit and FootepTJ] for a more thorough dis- 
cussion of these polynomials, as well as general 
properties of polynomial rings. 

Assume maix) exists and ma{x) = ^n{x) for 
some n S Z+. 











m,a[a) 
^n(a) 

d\n 

q"-1 

i2iTcn 1 



2 for some 

i2ncq _ 



nc G Z. Thus c G Q. 

Conversely, assume c G Q. c 
p,q £l^. ma{x) exists, since a'^ — \ = e*'^'^'^'? — 1 
gi27rp _ -^ — Q Moreover, ma{x) divides x'^ — 1 = 
W.d\q ^d{x) in QN- rna{x) oc $n(aj) for some n\q 
Since both are monic, ma{x) = ^n{x). □ 



Shor's basis. 



B The Cyclotomic/Rational 
Number Theorem 

Theorem B.l For any c G M, the following two 
statements are logically equivalent: 



^Definition of ma{x) 

^By assumption. 

■^0 times anything is 0. 

^Property of cyclotomic polynomials. 

''Definition of a. 
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